Vendor
An authenticated remote code execution vulnerability (CVE-2020-36842) in the WPvivid WordPress plugin allows low-privileged users to achieve code execution via ZIP archive file uploads.